Exceptional Control Flow Part II October 21, 2004

1
Exceptional Control FlowPart IIOctober 21, 2004
15-213The course that gives CMU its Zip!

• Topics
• Process Hierarchy
• Shells
• Signals
• Nonlocal jumps

class16.ppt
2
ECF Exists at All Levels of a System

• Exceptions
• Hardware and operating system kernel software
• Concurrent processes
• Hardware timer and kernel software
• Signals
• Kernel software
• Non-local jumps
• Application code

Previous Lecture
This Lecture
3
The World of Multitasking

• System Runs Many Processes Concurrently
• Process executing program
• State consists of memory image register values
  program counter
• Continually switches from one process to another
• Suspend process when it needs I/O resource or
  timer event occurs
• Resume process when I/O available or given
  scheduling priority
• Appears to user(s) as if all processes executing
  simultaneously
• Even though most systems can only execute one
  process at a time
• Except possibly with lower performance than if
  running alone

4
Programmers Model of Multitasking

• Basic Functions
• fork() spawns new process
• Called once, returns twice
• exit() terminates own process
• Called once, never returns
• Puts it into zombie status
• wait() and waitpid() wait for and reap terminated
  children
• execl() and execve() run a new program in an
  existing process
• Called once, (normally) never returns
• Programming Challenge
• Understanding the nonstandard semantics of the
  functions
• Avoiding improper use of system resources
• E.g. Fork bombs can disable a system.

5
Unix Process Hierarchy
0
init 1
Login shell
Daemon e.g. httpd
Child
Child
Child
Grandchild
Grandchild
6
The ps command
(output edited to fit slide)
Unixgt ps aux -w --forest

• USER PID TTY STAT COMMAND
• root 1 ? S init 3
• root 2 ? SW keventd
• root 3 ? SWN ksoftirqd_CPU0
• root 4 ? SW kswapd
• root 5 ? SW bdflush
• root 6 ? SW kupdated
• root 9 ? SWlt mdrecoveryd
• root 12 ? SW scsi_eh_0
• root 397 ? S /sbin/pump -i eth0
• root 484 ? Slt /usr/local/sbin/afsd
  -nosettime
• root 533 ? S syslogd -m 0
• root 538 ? S klogd -2
• rpc 563 ? S portmap
• rpcuser 578 ? S rpc.statd
• daemon 696 ? S /usr/sbin/atd
• root 713 ? S /usr/local/etc/nanny
  -init /etc/nanny.conf
• mmdf 721 ? S \_
  /usr/local/etc/deliver -b -csmtpcmu

7
The ps Command (cont.)

• USER PID TTY STAT COMMAND
• root 889 tty1 S /bin/login -- agn
• agn 900 tty1 S \_ xinit -- 0
• root 921 ? SL \_ /etc/X11/X
  -auth /usr1/agn/.Xauthority 0
• agn 948 tty1 S \_ /bin/sh
  /afs/cs.cmu.edu/user/agn/.xinitrc
• agn 958 tty1 S \_ xterm
  -geometry 80x4511 -C -j -ls -n
• agn 966 pts/0 S \_
  -tcsh
• agn 1184 pts/0 S \_
  /usr/local/bin/wish8.0 -f /usr
• agn 1212 pts/0 S
  \_ /usr/local/bin/wish8.0 -f
• agn 3346 pts/0 S
  \_ aspell -a -S
• agn 1191 pts/0 S \_
  /bin/sh /usr/local/libexec/moz
• agn 1204 8 pts/0 S
  \_ /usr/local/libexec/mozilla
• agn 1207 8 pts/0 S
  \_ /usr/local/libexec/moz
• agn 1208 8 pts/0 S
  \_ /usr/local/libexec
• agn 1209 8 pts/0 S
  \_ /usr/local/libexec
• agn 17814 8 pts/0 S
  \_ /usr/local/libexec
• agn 2469 pts/0 S
  \_ usr/local/lib/Acrobat
• agn 2483 pts/0 S
  \_ java_vm

8
Unix Startup Step 1
1. Pushing reset button loads the PC with the
address of a small bootstrap program. 2.
Bootstrap program loads the boot block (disk
block 0). 3. Boot block program loads kernel
binary (e.g., /boot/vmlinux) 4. Boot block
program passes control to kernel. 5. Kernel
handcrafts the data structures for process 0.
0
Process 0 handcrafted kernel process
Process 0 forks child process 1
init 1
Child process 1 execs /sbin/init
9
Some PC Start-up Details
10
Unix Startup Step 2
0
init 1
/etc/inittab
init forks and execs daemons per /etc/inittab,
and forks and execs a getty program for the
console
Daemons e.g. ftpd, httpd
getty
11
Unix Startup Step 3
0
init 1
The getty process execs a login program
login
12
Unix Startup Step 4
0
init 1
login reads login-ID and passwd. if OK, it execs
a shell. if not OK, it execs another getty
tcsh
In case of login on the console xinit may be used
instead of a shell to start the window manger
13
Shell Programs

• A shell is an application program that runs
  programs on behalf of the user.
• sh Original Unix Bourne Shell
• csh BSD Unix C Shell, tcsh Enhanced C Shell
• bash Bourne-Again Shell

int main() char cmdlineMAXLINE
while (1) / read / printf("gt ")
Fgets(cmdline, MAXLINE, stdin) if
(feof(stdin)) exit(0) / evaluate
/ eval(cmdline)
Execution is a sequence of read/evaluate steps
14
Simple Shell eval Function
void eval(char cmdline) char
argvMAXARGS / argv for execve() / int
bg / should the job run in bg or
fg? / pid_t pid / process id
/ bg parseline(cmdline, argv) if
(!builtin_command(argv)) if ((pid Fork())
0) / child runs user job / if
(execve(argv0, argv, environ) lt 0)
printf("s Command not found.\n",
argv0) exit(0) if (!bg) /
parent waits for fg job to terminate /
int status if (waitpid(pid, status, 0) lt
0) unix_error("waitfg waitpid
error") else / otherwise, dont
wait for bg job / printf("d s", pid,
cmdline)
15
Problem with Simple Shell Example

• Shell correctly waits for and reaps foreground
  jobs.
• But what about background jobs?
• Will become zombies when they terminate.
• Will never be reaped because shell (typically)
  will not terminate.
• Creates a memory leak that will eventually crash
  the kernel when it runs out of memory.
• Solution Reaping background jobs requires a
  mechanism called a signal.

16
Signals

• A signal is a small message that notifies a
  process that an event of some type has occurred
  in the system.
• Kernel abstraction for exceptions and interrupts.
• Sent from the kernel (sometimes at the request of
  another process) to a process.
• Different signals are identified by small integer
  IDs (1-30)
• The only information in a signal is its ID and
  the fact that it arrived.

17
Signal Concepts

• Sending a signal
• Kernel sends (delivers) a signal to a destination
  process by updating some state in the context of
  the destination process.
• Kernel sends a signal for one of the following
  reasons
• Kernel has detected a system event such as
  divide-by-zero (SIGFPE) or the termination of a
  child process (SIGCHLD)
• Another process has invoked the kill system call
  to explicitly request the kernel to send a signal
  to the destination process.

18
Signal Concepts (continued)

• Receiving a signal
• A destination process receives a signal when it
  is forced by the kernel to react in some way to
  the delivery of the signal.
• Three possible ways to react
• Ignore the signal (do nothing)
• Terminate the process (with optional core dump).
• Catch the signal by executing a user-level
  function called a signal handler.
• Akin to a hardware exception handler being called
  in response to an asynchronous interrupt.

19
Signal Concepts (continued)

• A signal is pending if it has been sent but not
  yet received.
• There can be at most one pending signal of any
  particular type.
• Important Signals are not queued
• If a process has a pending signal of type k, then
  subsequent signals of type k that are sent to
  that process are discarded.
• A process can block the receipt of certain
  signals.
• Blocked signals can be delivered, but will not be
  received until the signal is unblocked.
• A pending signal is received at most once.

20
Signal Concepts

• Kernel maintains pending and blocked bit vectors
  in the context of each process.
• pending represents the set of pending signals
• Kernel sets bit k in pending whenever a signal of
  type k is delivered.
• Kernel clears bit k in pending whenever a signal
  of type k is received
• blocked represents the set of blocked signals
• Can be set and cleared by the application using
  the sigprocmask function.

21
Process Groups

• Every process belongs to exactly one process group

Shell
pid10 pgid10
Fore- ground job
Back- ground job 1
Back- ground job 2
pid20 pgid20
pid32 pgid32
pid40 pgid40
Background process group 32
Background process group 40
Child
Child
getpgrp() Return process group of current
process setpgid() Change process group of a
process
pid21 pgid20
pid22 pgid20
Foreground process group 20
22
Sending Signals with kill Program

• kill program sends arbitrary signal to a process
  or process group
• Examples
• kill 9 24818
• Send SIGKILL to process 24818
• kill 9 24817
• Send SIGKILL to every process in process group
  24817.

linuxgt ./forks 16 linuxgt Child1 pid24818
pgrp24817 Child2 pid24819 pgrp24817
linuxgt ps PID TTY TIME CMD 24788
pts/2 000000 tcsh 24818 pts/2 000002
forks 24819 pts/2 000002 forks 24820 pts/2
000000 ps linuxgt kill -9 -24817 linuxgt ps
PID TTY TIME CMD 24788 pts/2
000000 tcsh 24823 pts/2 000000 ps linuxgt
23
Sending Signals from the Keyboard

• Typing ctrl-c (ctrl-z) sends a SIGINT (SIGTSTP)
  to every job in the foreground process group.
• SIGINT default action is to terminate each
  process
• SIGTSTP default action is to stop (suspend)
  each process

Shell
pid10 pgid10
Fore- ground job
Back- ground job 1
Back- ground job 2
pid20 pgid20
pid32 pgid32
pid40 pgid40
Background process group 32
Background process group 40
Child
Child
pid21 pgid20
pid22 pgid20
Foreground process group 20
24
Example of ctrl-c and ctrl-z
linuxgt ./forks 17 Child pid24868 pgrp24867
Parent pid24867 pgrp24867 lttyped
ctrl-zgt Suspended linuxgt ps a PID TTY
STAT TIME COMMAND 24788 pts/2 S 000
-usr/local/bin/tcsh -i 24867 pts/2 T
001 ./forks 17 24868 pts/2 T 001
./forks 17 24869 pts/2 R 000 ps a
bassgt fg ./forks 17 lttyped ctrl-cgt linuxgt ps
a PID TTY STAT TIME COMMAND 24788
pts/2 S 000 -usr/local/bin/tcsh -i
24870 pts/2 R 000 ps a
25
Sending Signals with kill Function
void fork12() pid_t pidN int i,
child_status for (i 0 i lt N i) if
((pidi fork()) 0) while(1) / Child
infinite loop / / Parent terminates the
child processes / for (i 0 i lt N i)
printf("Killing process d\n",
pidi) kill(pidi, SIGINT) /
Parent reaps terminated children / for (i
0 i lt N i) pid_t wpid wait(child_status)
if (WIFEXITED(child_status))
printf("Child d terminated with exit status
d\n", wpid, WEXITSTATUS(child_status)) els
e printf("Child d terminated abnormally\n",
wpid)
26
Receiving Signals

• Suppose kernel is returning from an exception
  handler and is ready to pass control to process
  p.
• Kernel computes pnb pending blocked
• The set of pending nonblocked signals for process
  p
• If (pnb 0)
• Pass control to next instruction in the logical
  flow for p.
• Else
• Choose least nonzero bit k in pnb and force
  process p to receive signal k.
• The receipt of the signal triggers some action by
  p
• Repeat for all nonzero k in pnb.
• Pass control to next instruction in logical flow
  for p.

27
Default Actions

• Each signal type has a predefined default action,
  which is one of
• The process terminates
• The process terminates and dumps core.
• The process stops until restarted by a SIGCONT
  signal.
• The process ignores the signal.

28
Installing Signal Handlers

• The signal function modifies the default action
  associated with the receipt of signal signum
• handler_t signal(int signum, handler_t handler)
• Different values for handler
• SIG_IGN ignore signals of type signum
• SIG_DFL revert to the default action on receipt
  of signals of type signum.
• Otherwise, handler is the address of a signal
  handler
• Called when process receives signal of type
  signum
• Referred to as installing the handler.
• Executing handler is called catching or
  handling the signal.
• When the handler executes its return statement,
  control passes back to instruction in the control
  flow of the process that was interrupted by
  receipt of the signal.

29
Signal Handling Example
void int_handler(int sig) printf("Process
d received signal d\n", getpid(),
sig) exit(0) void fork13() pid_t
pidN int i, child_status
signal(SIGINT, int_handler) . . .
linuxgt ./forks 13 Killing process 24973 Killing
process 24974 Killing process 24975 Killing
process 24976 Killing process 24977 Process
24977 received signal 2 Child 24977 terminated
with exit status 0 Process 24976 received signal
2 Child 24976 terminated with exit status 0
Process 24975 received signal 2 Child 24975
terminated with exit status 0 Process 24974
received signal 2 Child 24974 terminated with
exit status 0 Process 24973 received signal 2
Child 24973 terminated with exit status 0
linuxgt
30
Signal Handler Funkiness

• Pending signals are not queued
• For each signal type, just have single bit
  indicating whether or not signal is pending
• Even if multiple processes have sent this signal

int ccount 0 void child_handler(int sig)
int child_status pid_t pid
wait(child_status) ccount--
printf("Received signal d from process d\n",
sig, pid) void fork14() pid_t
pidN int i, child_status ccount N
signal(SIGCHLD, child_handler) for (i
0 i lt N i) if ((pidi fork()) 0)
/ Child Exit / exit(0) while
(ccount gt 0) pause()/ Suspend until signal
occurs /
31
Living With Nonqueuing Signals

• Must check for all terminated jobs
• Typically loop with wait

void child_handler2(int sig) int
child_status pid_t pid while ((pid
waitpid(-1, child_status, WNOHANG)) gt 0)
ccount-- printf("Received signal d from
process d\n", sig, pid) void
fork15() . . . signal(SIGCHLD,
child_handler2) . . .
32
Signal Handler Funkiness (Cont.)

• Signal arrival during long system calls (say a
  read)
• Signal handler interrupts read() call
• Linux upon return from signal handler, the
  read() call is restarted automatically
• Some other flavors of Unix can cause the read()
  call to fail with an EINTER error number
  (errno)in this case, the application program can
  restart the slow system call
• Subtle differences like these complicate the
  writing of portable code that uses signals.

33
A Program That Reacts toExternally Generated
Events (ctrl-c)
include ltstdlib.hgt include ltstdio.hgt include
ltsignal.hgt void handler(int sig)
printf("You think hitting ctrl-c will stop the
bomb?\n") sleep(2) printf("Well...")
fflush(stdout) sleep(1) printf("OK\n")
exit(0) main() signal(SIGINT,
handler) / installs ctl-c handler / while(1)

34
A Program That Reacts to Internally Generated
Events
include ltstdio.hgt include ltsignal.hgt int
beeps 0 / SIGALRM handler / void
handler(int sig) printf("BEEP\n")
fflush(stdout) if (beeps lt 5)
alarm(1) else printf("BOOM!\n")
exit(0)
main() signal(SIGALRM, handler)
alarm(1) / send SIGALRM in 1
second / while (1) / handler returns
here /
linuxgt a.out BEEP BEEP BEEP BEEP BEEP
BOOM! bassgt
35
Nonlocal Jumps setjmp/longjmp

• Powerful (but dangerous) user-level mechanism for
  transferring control to an arbitrary location.
• Controlled to way to break the procedure call /
  return discipline
• Useful for error recovery and signal handling
• int setjmp(jmp_buf j)
• Must be called before longjmp
• Identifies a return site for a subsequent
  longjmp.
• Called once, returns one or more times
• Implementation
• Remember where you are by storing the current
  register context, stack pointer, and PC value in
  jmp_buf.
• Return 0

36
setjmp/longjmp (cont)

• void longjmp(jmp_buf j, int i)
• Meaning
• return from the setjmp remembered by jump buffer
  j again...
• this time returning i instead of 0
• Called after setjmp
• Called once, but never returns
• longjmp Implementation
• Restore register context from jump buffer j
• Set eax (the return value) to i
• Jump to the location indicated by the PC stored
  in jump buf j.

37
setjmp/longjmp Example
include ltsetjmp.hgt jmp_buf buf main() if
(setjmp(buf) ! 0) printf("back in main
due to an error\n") else printf("first
time through\n") p1() / p1 calls p2, which
calls p3 / ... p3() lterror checking
codegt if (error) longjmp(buf, 1)
38
Putting It All Together A Program That Restarts
Itself When ctrl-cd
bassgt a.out
starting
processing...
processing...
restarting
processing...
processing...
restarting
processing...
39
Limitations of Nonlocal Jumps

• Works within stack discipline
• Can only long jump to environment of function
  that has been called but not yet completed

env
P1
P1
jmp_buf env P1() if (setjmp(env)) /
Long Jump to here / else P2()
P2() . . . P2() . . . P3() P3()
longjmp(env, 1)
P2
After longjmp
P2
P2
P3
Before longjmp
40
Limitations of Long Jumps (cont.)

• Works within stack discipline
• Can only long jump to environment of function
  that has been called but not yet completed

jmp_buf env P1() P2() P3() P2()
if (setjmp(env)) / Long Jump to here /
P3() longjmp(env, 1)
41
Summary

• Signals provide process-level exception handling
• Can generate from user programs
• Can define effect by declaring signal handler
• Some caveats
• Very high overhead
• gt10,000 clock cycles
• Only use for exceptional conditions
• Dont have queues
• Just one bit for each pending signal type
• Nonlocal jumps provide exceptional control flow
  within process
• Within constraints of stack discipline